Vim

CVEs (268)

• CVE-2021-4069HigDec 6, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Use After Free

• CVE-2021-3984HigDec 1, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3973HigNov 19, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3968HigNov 19, 2021
  Vim

  Vim
  risk 0.00cvss 8.0epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3974HigNov 19, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Use After Free

• CVE-2021-3928HigNov 5, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Use of Uninitialized Variable

• CVE-2021-3927HigNov 5, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3903HigOct 27, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3872HigOct 19, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3875MedOct 15, 2021
  Vim

  Vim
  risk 0.00cvss 5.5epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3796HigSep 15, 2021
  Vim

  Vim
  risk 0.00cvss 7.3epss 0.02

  vim is vulnerable to Use After Free

• CVE-2021-3778HigSep 15, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2021-3770HigSep 6, 2021
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.01

  vim is vulnerable to Heap-based Buffer Overflow

• CVE-2019-20079HigDec 30, 2019
  Vim

  Vim
  risk 0.00cvss 7.8epss 0.02

  The autocmd feature in window.c in Vim before 8.1.2136 accesses freed memory.

• CVE-2018-20786HigFeb 24, 2019
  Vim

  Vim
  risk 0.00cvss 7.5epss 0.03

  libvterm through 0+bzr726, as used in Vim and other products, mishandles certain out-of-memory conditions, leading to a denial of service (application crash), related to screen.c, state.c, and vterm.c.

• CVE-2008-6235Feb 21, 2009
  Vim

  Vim
  risk 0.00cvss —epss 0.03

  The Netrw plugin (netrw.vim) in Vim 7.0 and 7.1 allows user-assisted attackers to execute arbitrary commands via shell metacharacters in a filename used by the (1) "D" (delete) command or (2) b:netrw_curdir variable, as demonstrated using the netrw.v4 and netrw.v5 test cases.

• CVE-2008-3075Feb 21, 2009
  Vim

  Vim
  risk 0.00cvss —epss 0.04

  The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a ZIP archive and possibly (2) the filename of the first file in a ZIP archive,…

• CVE-2008-3074Feb 21, 2009
  Vim

  Vim
  risk 0.00cvss —epss 0.04

  The shellescape function in Vim 7.0 through 7.2, including 7.2a.10, allows user-assisted attackers to execute arbitrary code via the "!" (exclamation point) shell metacharacter in (1) the filename of a tar archive and possibly (2) the filename of the first file in a tar archive,…

• CVE-2009-0316Jan 28, 2009
  Vim

  Vim
  risk 0.00cvss —epss 0.03

  Untrusted search path vulnerability in src/if_python.c in the Python interface in Vim before 7.2.045 allows local users to execute arbitrary code via a Trojan horse Python file in the current working directory, related to a vulnerability in the PySys_SetArgv function…

• CVE-2008-4677Oct 22, 2008
  Vim

  Netrw
  risk 0.00cvss —epss 0.02

  autoload/netrw.vim (aka the Netrw Plugin) 109, 131, and other versions before 133k for Vim 7.1.266, other 7.1 versions, and 7.2 stores credentials for an FTP session, and sends those credentials when attempting to establish subsequent FTP sessions to servers on different hosts,…